Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A deadlock vulnerability has been identified in the Linux kernel's AMD DNA acceleration driver, specifically in the power management routine. This issue arises when an application sends a query IOCTL while the auto-suspend feature is active. The query process acquires the device lock and then calls a function to resume power management, which waits for the current suspend operation to finish. Meanwhile, the suspend callback tries to acquire the device lock, leading to a deadlock situation. The vulnerability affects the Linux kernel stable tree.
Exploitation of this vulnerability leads to a deadlock condition, causing the system to hang and potentially disrupting normal operations.
To reproduce this vulnerability, initiate an auto-suspend process and then issue a query IOCTL within the same timeframe. The query will hold the device lock and attempt to resume power management, while the suspend callback tries to acquire the lock, creating a deadlock.
The vulnerability has been addressed in the Linux kernel. Users can apply the latest patches available in the Linux kernel stable tree to mitigate this issue.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.